U.S. Department of the Interior 
PRIVACY IMPACT ASSESSMENT 





Introduction 


The Department of the Interior requires PIAs to be conducted and maintained on all IT systems whether already 
in existence, in development or undergoing modification in order to adequately evaluate privacy risks, ensure 
the protection of privacy information, and consider privacy implications throughout the information system 
development life cycle. This PIA form may not be modified and must be completed electronically; hand- 
written submissions will not be accepted. See the DOI PIA Guide for additional guidance on conducting a PIA 
or meeting the requirements of the E-Government Act of 2002. See Section 6.0 of the DOI PIA Guide for 
specific guidance on answering the questions in this form. 


NOTE: See Section 7.0 of the DOI PIA Guide for guidance on using the DOI Adapted PIA template to assess 
third-party websites or applications. 


Name of Project: Financial and Business Management System Continuing Support Environment (FBMS- 
CSE) 

Bureau/Office: Office of the Chief Information Officer 

Date: March 17, 2017 

Point of Contact: 

Name: Teri Barnett 

Title: Departmental Privacy Officer 

Email: Teri_Barnett@ios.doi.gov 

Phone: (202) 208-1605 

Address: 1849 C Street, NW, Mail Stop 7124S MIB, Washington, DC 20240 


Section 1. General System Information 


A. Is a full PIA required? 


_lYes, information is collected from or maintained on 
[]Members of the general public 

[_]Federal personnel and/or Federal contractors 
Cl Volunteers 

OA 




















XNo: Information is NOT collected, maintained, or used that is identifiable to the individual in this 
system. Only sections 1 and 5 of this form are required to be completed. 


B. What is the purpose of the system? 


The Financial and Business Management System (FBMS) Continuing Support Environment (CSE), 
managed by the Department of the Interior (DOI) Business Integration Office (BIO), is a collection of 
tools that support items not hosted in the FBMS-Cloud due to technical, security or fiscal reasons. 
FBMS-CSE is comprised of the following enterprise computing services: 
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BIO Project Management Tools 
e Version One (V1) - V1 tool will be used to assist BIO with managing their Agile project 
processes. 
e Automated Testing Tools (ATT) - The tools will run automated test scripts in the Development 
and Test environments only. 


External Portal. The portal will allow DOI’s external vendors to access the information within FBMS. 
The primary goal of the external portal is to provide vendor’s role based access to specific application, 
such as contract aviation business, to enter or lookup data relevant to the services they provide to DOI 
Bureaus through FBMS. 


DX Servers. The servers are used to support the data exchange and interface capabilities of the FBMS 
system. FBMS DX servers provide the DOI government hosted interface gateway between the 
departmental, bureau-specific, and external partner systems and FBMS-Cloud in order to support the 
DOI Business Process Operations. 


The FBMS-CSE tools will assist and support eight functional areas of the FBMS Cloud. The eight 
functional areas in the FBMS-Cloud the tools will support are Core Financials, Acquisition, Travel, 
Personal Property and Fleet Management, Real Property, enterprise Management Information, Budget 
Formulation and Planning, Financial Assistance, and Business Warehouse Reporting. The FBMS-CSE 
components interface with Departmental, bureau/office, and external systems in order to support the 
DOI Business Process Operations. The FBMS-CSE solution is designed to meet all DOI objectives. 
The privacy implications for FBMS Cloud and these functional areas were addressed in the FBMS 
Cloud privacy impact assessment (PIA), which may be viewed on the DOI PIA website: 
https://www.doi.gov/privacy/pia 





. What is the legal authority? 


Chapter 1 of Title 48, CFR Chapter 1 (Federal Acquisition Regulations); 5 U.S.C. 5514, 5701 et seq.; 26 
U.S.C. 6402; 31 U.S.C. 3511 and 3512, 3701, 3702, 3711; 40 U.S.C. 483; Public Law 106-107, and 41 
CFR 300-304 


. Why is this PIA being completed or modified? 


XI New Information System 

L)New Electronic Collection 

_JExisting Information System under Periodic Review 
_] Merging of Systems 

C Significantly Modified Information System 
_)Conversion from Paper to Electronic Records 

Cl Retiring or Decommissioning a System 

[JOther: Describe 
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E. Is this information system registered in CSAM? 
Xl Yes: Enter the UII Code and the System Security Plan (SSP) Name 
010-000000316; System Security Plan (SSP) for FBMS Continuing Support Environment 
LINo 


F. List all minor applications or subsystems that are hosted on this system and covered under this 
privacy impact assessment. 











Subsystem Name Purpose Contains PII Describe 
(Yes/No) If Yes, provide a 
description. 
None None No N/A 

















G. Does this information system or electronic collection require a published Privacy Act System of 
Records Notice (SORN)? 


LlYes: List Privacy Act SORN Identifier(s) 
No 














X 


H. Does this information system or electronic collection require an OMB Control Number? 


ClYes: Describe 
No 














X 


